LAN 1: on eth4 - 192.168.2.0/24
LAN 2: on eth5 - 192.168.100.1/30 (ftp server)
WAN 1: on eth1 - all default connection goes here - static 203.89.x.x
WAN 2: on eth2 - only ftp server goes here - static 202.43.x.1/29
Here are parts of my configuration:
/ip firewall mangle
28 ;;; FTP Server
chain=prerouting action=mark-connection new-connection-mark=FTP-out passthrough=no
protocol=tcp src-address=192.168.100.2 in-interface=ether02
29 ;;; FTP Server
chain=prerouting action=mark-routing new-routing-mark=FTP-to-wan passthrough=no protocol=tcp
src-address=192.168.100.2 in-interface=ether05 connection-mark=FTP-out
/ip firewall nat
0 ;;; FTP Server NAT
chain=dstnat action=dst-nat to-addresses=192.168.100.2 protocol=tcp dst-address=202.43.x.x
1 ;;; FTP Server NAT
chain=dstnat action=dst-nat to-addresses=192.168.100.2 protocol=udp dst-address=202.43.x.x
2 ;;; FTP Server NAT
chain=srcnat action=src-nat to-addresses=192.168.100.1 dst-address=192.168.100.2
out-interface=ether02
/ip route
0 A S ;;; FTP Server
dst-address=0.0.0.0/0 pref-src=202.43.x.2 gateway=202.43.x.1
distance=1 scope=30 target-scope=10 routing-mark=FTP-to-wan
The problem is, when ftp server make an outside connection, RX traffic always through WAN1, can’t through WAN2
Plz help me solved this.
Thanks